Skip to main content
Version status: In force | Document consolidation status: Updated to reflect all known changes
Version date: 31 December 2020 - onwards
Version 4 of 4

Regulation 99 Incident reporting

(1) If a payment service provider becomes aware of a major operational or security incident, the payment service provider must, without undue delay, notify the FCA.

(2) A notification under paragraph (1) must be in such form and manner, and contain such information, as the FCA may direct.

(3) If the incident has or may have an impact on the financial interests of its payment service users, the payment service provider must, without undue delay, inform its payment service users of the incident and of all measures that they can take to mitigate the adverse effects of the incident.

(4) Upon receipt of the notification referred to in paragraph (1), the FCA must notify any other relevant authorities in the United Kingdom.

(5) [deleted]